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0.  ABSTRACT 

,  -  Let  C  be  an  acyclic  boolean  circuit  with  n  gates  and  <  n  inputs. 

A  circuit  manufacture  error  may  result  in  a  "Stuck'-af'  (S-A)  fault  is  a  circuit 
identical  to  C  except  a  gate  v  only  outputs  a  fixed  boolean  value.  The 
(S-A)  fault  simulation  problem  for  C  is  to  determine  all  possible  S-A  faults 
which  can  be  detected  (i.e. ,  faults  for  which  a  faulty  circuit  and  C  would 
give  distinct  outputs)  by  a  given  test  pattern  input. 

We  consider  the  case  where  C  is  a  tree  (i.e.,  has  fan-out  1). 

We  give  a  practical  algorithm  for  fault  simulation  which  simultaneously 
determines  all  detectable  S-A  faults  for  every  gate  in  the  circuit  tree  C. 

Our  algorithm  requires  only  the  evaluation  of  a  circuit  FS(C)  which  has 
<  7n  gates  and  has  depth  ^3{d  +1),  when  d  is  the  depth  of  C.  Thus  the 
sequential  time  of  our  algorithm  is  i  <  7n,  and  the  parallel  time  is  <  3(d  +1). 
Furthermore  FS (C)  requires  only  a  small  constant  factor  more  VLSI  area  than 
does  the  original  circuit  C.  '  ^  '  ■ 

.t..  J. 

We  also  extend  our  results  to  get  efficient  methods  for  fault  simulation 
of  oblivious  VLSI  circuits  with  feedback  lines. 
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ABSTRACT 


Let  C  be  an  acyclic  boolean  circuit  with  n  gates  and  <  n  inputs. 

A  circuit  manufacture  error  may  result  in  a  "Stuck-at"  (S-A)  fault  is  a  circuit 
identical  to  C  except  a  gate  v  only  outputs  a  fixed  boolean  value.  The 
(S-A)  fault  simulation  problem  for  C  is  to  determine  all  possible  S-A  faults 
which  can  be  detected  (i.e.,  faults  for  which  a  faulty  circuit  and  C  would 
give  distinct  outputs)  by  a  given  test  pattern  input. 

We  consider  the  case  where  C  is  a  tree  (i.e.,  has  fan-out  1). 

We  give  a  practical  algorithm  for  fault  simulation  which  simultaneously 
determines  all  detectable  S-A  faults  for  every  gate  in  the  circuit  tree  C. 

Our  algorithm  requires  only  the  evaluation  of  a  circuit  FS(C)  which  has 
<  7n  gates  and  has  depth  <  3(d+l),  when  d  is  the  depth  of  C.  Thus  the 
sequential  time  of  our  algorithm  is  <  7n,  and  the  parallel  time  is  <  3(d+l). 
Furthermore  FS(C)  requires  only  a  small  constant  factor  more  VLSI  area  than 
does  the  original  circuit  C. 

We  also  extend  our  results  to  get  efficient  methods  for  fault  simulation 
of  oblivious  VLSI  circuits  with  feedback  lines. 


1 


INTRODUCTION 


1 . 1  Faults  in  VLSI  Manufacture 

In  a  very  short  period  of  time,  integrated  circuits  have  grown  in 
complexity  from  a  single  semiconductor,  to  the  now  current  Large  Scale 

4 

Integration  (LSI)  with  up  to  nwlO  gates,  and  recently  the  advent  of 
Very  Large  Scale  Integration  (VLSI)  with  feasibility  of  nwlO^  gates 
or  more. 

Unfortunately,  the  mcuiufacture  of  LSI  and  VLSI  yields  faulty  circuits 

with  a  frequency  that  grows  very  quic)cly  with  the  number  n  of  gates.  In 

theory,  the  yield  rate  decreases  exponentially  with  the  number  of  gates,  and 

4 

this  IS  borne  out  in  practice.  For  LSI  with  n  «>10  ,  a  yield  rate  of  50% 
would  be  considered  extraordinarily  good,  and  for  VLSI  with  n  *<10^,  one  can 
expect  at  best  a  yield  rate  in  nonfaulty  circuits  of  a  few  percentages.  Since 
a  large  integrated  circuit  can  have  only  a  limited  number  of  input/output 
pods,  it  is  not  practical  to  directly  test  the  preformance  of  each  individual 
gate  of  such  a  circuit.  Instead,  a  set  of  input  vectors  called  test  patterns 
are  input  to  the  possibly  faulty  circuit,  and  the  resulting  output  is  compaired 
with  the  output  of  a  known  faultless  circuit.  The  set  of  test  patterns  aover 
a  given  fault  type  T  if  they  distinguish  all  faults  of  type  T. 

1.2  The  Fault  Model 

To  make  fault  detection  tractable,  the  integrated  circuit  is  generally 
assumed  to  be  acyclic,  with  no  feedback  lines.  If  feedback  lines  exist, 
either  (1)  they  are  simply  cut,  resulting  in  an  acyclic  network  with  some 
additional  inputs  or  preferably,  (2)  the  sequential  logic  is  oblivious  to  the 
inputs  and  so  can  be  unraveled  to  form  an  acyclic  network.  (If  required,  the 
circuit  can  be  made  into  a  tree,  by  further  cutting  lines  so  all  gates  have 


fan-out  ^  1.)  The  integrated  circuit  'is  thus  modeled  as  a  acyclic,  boolean 
circuit  C.  A  Stuak-At  (S-A)  fault  is  a  gate  which  is  permanently  set  to  a 
boolean  value  b.  In  particular,  a  S-A-0  (S-A-1)  fault  is  where  the  gate 

is  set  to  b=0  (b=l),  respectively.  The  S-A  is  the  most  common  fault  type 

tested  for,  and  of  the  most  importance  for  currently  used  technologies  such  as 
nMOS.  We  will  consider  only  the  S-A  fault  type  in  this  paper. 

Test  generation  is  the  problem  of  finding  a  set  of  test  patterns,  and 
(S-A)  fault  simulation  is  the  problem  of  detecting  those  S-A  faults  which  a 
given  test  patterns  covers.  Fault  Coverage  is  the  problan  of  finding  a  set 
of  test  patterns  which  cover  all  possible  S-A  faults  of  the  circuit.  These 
problems — as  our  extensive  references  will  indicate — have  been  very  thoroughly 
and  extensively  studied  since  the  early  1960s  up  to  the  current  time.  In 
spite  of  considerable  progress  in  the  use  of  heuristic  algorithms,  many 
fundamental  problems  still  remain,  and  become  more  difficult  as  the  circuit 
size  n  of  current  VLSI  continues  to  very  quickly  grow. 

1 . 3  Previous  Work  in  Test  Generation 

In  theory,  finding  a  test  vector  which  detects  a  given  gault  is  NP  complete 
[Fujiwana  and  Toida,  82].  S-A  fault  test  generation  is  done  in  practice  by 
a  number  of  known  heuristic  methods  including  path  sensitization  [Eldred,  59] , 
[Armstrong,  66],  [Chang,  Manning,  Metze,  70],  [Eichelberger ,  75]  and  the 
D-algorithm  [Roth,  Bouricius,  Schneider,  67],  [Fujiwana  and  Shimano,  83]. 

[Goldberg,  Leiberherr,  85]  have  an  ingenious  algorithm  for  test  pattern 
generation  in  the  special  case  that  the  given  boolean  circuit  is  a  tree?  in  this 
case  they  reduce  test  pattern  generation  to  a  simple  parity  computation  which 
can  be  done  in  linear  time.  Hence,  their  method  for  test  pattern  generation 
requires  a  total  of  0(n  )  time  to  generate  test  patterns  for  the  2n  possible 


S-A  faults 
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Another  increasingly  popular,  and  practically  very  efficient  method  for  test 
generation  is  to  simply  generate  a  random  set  of  test  inputs  using  a  efficient 
pseudorandom  number  generators.  This  was  first  suggested  by  [Schnurmann, 

Lindbloom,  Carpenter,  75],  [Schnurmann,  Lindbloom,  Carpenter,  75],  [Savin, 

Bendell,  83],  [Savin,  Ditlow,  Bendell,  84],  [Lieberherr,  83],  [Markowsky,  84], 
[Lasq,  78]  have  developed  analytic  methods  for  testing  the  ef fectiveness  of 
random  testing.  In  many  cases,  they  show  that  a  small  number  of  random  test 
patterns  cover  almost  all  2n  possible  S-A  faults,  where  as  the  previously  sighted 
deterministic  methods  may  require  a  distinct  test  vector  for  each  possible 
S-A  fault. 

A  large  number  of  sufficiently  random  test  patterns  can  be  very  easily 
generated  by  a  feedback  shift  register  circuit  [Golomb,  67] ,  [Barzilai, 
Coppersmith,  Rosenberg,  83],  [Tang,  84].  The  response  of  the  circuit  tested 
can  then  be  compressed  by  the  signature  methods  of  [Carter,  82A,82b]. 

1 Previous  Work  in  Fault  Simulation 

This  paper  is  concerned  with  developing  an  efficient  method  for  S-A  fault 

simulation,  i.e. ,  to  determine  exactly  all  S-A  faults  which  are  covered  by  a 

given  test  pattern.  All  previously  known  methods  [Poage,  63],  [Armstrong,  66, 

72],  [Roth,  66],  [Roth,  Bouricius,  Schneider,  67],  [Manning,  Chang,  68], 

[Chang,  Manning,  Metre,  70,74],  [Breuer,  70],  [Friedman,  Menon,  71],  [Ulrich, 

Boker,  74],  [Muehldorf,  Savkar,  81],  [Jain,  Agrawal,  84],  [Abravovici,  Menon, 

Miller,  84]  for  S-A  fault  simulation  of  a  general  boolean  circuit  of  size  n 
2 

require  cn  time  for  some  constant  c^l.  This  quadratic  time  bound  is 

4 

already  very  costly  for  moderate  size  LSI  since  if  n  ^ 10  ,  then  at  least 
n^  =10^^  steps  required  by  these  previous  methods  seems  unfeasible  even  on  the 
fastest  known  sequential  machine.  Recently,  [Abramovici,  Menon,  Miller,  84] 
give  a  linear  time  sequential  algorithm  for  fault  simulation  of  booleam  circuit 


trees. 


In  this  paper,  we  restrict  our  attention  primarily  to  the  case  C  is  a 
circuit  tree  i.e.,  has  fan-out  1.  (However,  in  the  last  section  we  describe 
how  to  extend  our  techniques  to  circuits  with  fan-out  >1.) 

We  describe  a  method  for  constructing  a  circuit  FS (C)  (for  "Fault 

Jimulation")  which  simultaneously  determines  all  detectable  S-A  faults  for 
every  gate  of  the  circuit  tree  C.  The  circuit  FS(C)  has  in  the  worst  case 
^  7n  gates,  (but  in  many  cases,  where  C  does  not  have  a  majority  of  v 
gates,  FS(C)  has  only  6n  gates).  The  VLSI  area  of  FS(C)  is  only  a  small 
constant  factor  more  than  the  VLSI  area  of  C.  The  sequential  execution  time 
of  our  algorithm  is  just  that  used  to  evaluate  FS(C),  which  is  at  most 
<  7n  steps.  Even  in  applications  such  as  VLSI  with  n  = 10^  gates,  sequential 
execution  of  our  algorithm  takes  only  a  fraction  of  a  second  on  conventional 
machines.  Furthermore,  our  algorithm  is  inherently  parallel,  since  all  that  is 
required  is  evaluation  of  the  circuit  FS(C).  The  parallel  time  for  evaluation 

A 

of  C  is  its  depth  which  is  ^  3(d  +1),  if  C  has  depth  d. 

The  advantage  of  our  method  over  that  of  (Abramovici,  Menon,  Miller,  84] 
is  that  we  explicitly  construct  a  boolean  circuit  for  fault  simulation,  where  as 
their 's  is  a  sequential  method.  Our  method  is  also  significantly  different, 

Tha  approach  we  use  to  solve  the  S-A-fault  simulation  problem  is  to 
compute  the  boolean  differences  (The  mathematical  theory  of  the  boolean 
difference  is  discussed  in  [Brown,  Young,  69],  [Thayse,  Dovio,  73],  [Thayes, 

8).)  of  the  circuit  output  with  respect  to  values  computed  by  the  circuit 
at  each  of  its  gates.  This  approach  is  discussed  in  [Muehldorf ,  73] , 

[Muehldorf,  Savkar,  81],  [Friedman,  Menon,  71],  [Sailers,  Hsiao,  Bearnson, 

68) ,  [Ku,  Masson,  75]  but  was  previously  considered  inefficient  because  of 
the  apparently  large  amount  of  algebraic  manipulation  required. 

[Baur,  Strassen,  83]  gave  an  0(n)  time  straight  line  algorithm  for  all 
the  partial  derivatives  of  a  polynomial  over  an  infinite  field  computed  by  a 


straight  line  program  of  depth  n,  and  [Jerrum,  83]  gave  a  more  combinatorial 
proof  of  this  result.  We  use  related  techniques  for  the  circuit  construction 
of  the  boolean  differences  over  the  field  GF(2),  to  solve  the  S-A  fault 
simulation  problem. 


1 .6  A  VLSI  Chip  for  Fau]t  Simulation  and  Coverage 

We  show  that  if  the  original  boolean  circuit  tree  C  has  VLSI  area  A, 
then  the  VLSI  area  required  for  our  on-fault  simulation  circuits  FS(C)  is 
only  a  small  constant  factor  more  than  A.  (The  constant  factor  depends  on 
the  VLSI  technology  used. ) 

Note  that  because  of  the  simplicity  and  locality  properties  of  our 
rules  for  generating  C'  from  C,  this  construction  can  easily  be  done 
automatically  by  known  VLSI  hardware  designed  layout  tools  (for  example  those 
of  [Lieberherr,  83] ,  [German,  Lieberherr,  84] ) ,  without  any  participation  by 
the  original  designer  of  C. 

Our  suggestion  for  the  practical  utilization  of  our  results  is  as  follows 
Given  an  acyclic  boolean  VLSI  circuit  C,  we  would  construct  "Fault  Coverage" 
VLSI  chip  FC(C)  which  contains  both  our  fault  simulator  FS(C)  as  well 
as  a  feedback  shift  register  for  generating  pseodo  random  test  inputs.  We 
do  not  need  to  output  the  S-A  faults  detected  by  FS(C)  for  each  test  pattern. 
Instead  we  keep  two  boolean  counters  (initially  0)  for  each  gate  v  of 
C,  which  indicates  whether  a  S-A-0  or  a  S-A-1  fault  at  v  has  been  covered 
by  a  previous  test  input.  Given  a  new  test  input  vector  these  counters 
can  easily  be  updated  by  a  single  boolean  operation  at  the  appropriate  gate 
of  FS(C).  The  new  test  pattern  is  output  only  if  it  covers  at  least  one  S-A 
fault  not  previous  covered.  We  can  then  very  quickly  output  from  FCtCl  a 
sequence  of  nonredundant  test  vectors  until  these  test  vectors  cover  all 
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3-A  faults.  If  it  happens  that  not  all  S-A  faults  are  covered  after  sampling 
a  given  number  of  pseudo-random  test  vectors,  then  FC(C)  would  inducate 
that  C  must  be  redesigned  appropriately.  However,  (as  the  above  reference 
on  the  analysis  of  random  testing  indicates) ,  a  small  number  of  random  test 
vectors  usually  suffice  to  cover  almost  all  S-A  faults. 

1 . 7  Fault  Simulation  of  Circuits  With  Feedback  Lines 

We  generalize  our  results  to  a  boolean  circuit  S  with  feedback  lines 
(i.e.,  S  may  have  cycles).  Suppose  S  has  n  gates  and  parallel  computa¬ 
tion  time  d.  We  can  unravel  S  into  an  acyclic  boolean  circuit  tree  C (S) 
with  n(d+l)  gates  and  depth  d.  Thus  we  can  apply  our  previously  described 
-A  fault  simulation  algorithm  to  C(S),  yielding  a  fault  simulation  circuit 
FS  (C(S))  of  7n(d+l)  gates  and  depth  3(d+l). 

Suppose  furthermore,  S  has  VLSI  area  A  using  d  layers.  Then  we 
can  avoid  actual  construction  of  C(S)  hy  repeatedly  recomputing  Q  when 
required.  This  idea  yields  a  VLSI  circuit  (with  feedback  lines)  for  fault 

simulation  with  0(n)  gates,  0(A)  area,  0(2.)  degrees,  and  parallel 
2 

time  bound  d  .  S  is  revevsable  if  it  can  be  made  to  run  its  computation 
both  forward  in  time  and  in  reverse  (i.e.,  it  can  compute  in  constant  time  both 
its  immediately  previous  state  as  well  as  its  immediate  succeeding  state) . 

Many  common  sequential  circuits  are  naturally  reversable  in  this  sense,  for 
example  the  Cooley-Tukey  FFT  circuit,  and  other  convolution  circuits,  the  Benes 
switching  circuit.  Batcher's  sorting  network,  and  the  DES  cryptographic  standard 
If  S  is  reversable,  we  show  how  to  construct  a  fault  simulation  circuit  for 
detecting  all  S-A  faults  (with  feedback  lines)  which  has  only  small  constant 
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H(x,0)  9  H(x,l)  =  (C  (X)  ®C-  (X))  a  (HC  (x) )  ©  C  (x) ) 

U  w  u  u 

=  1  =  X  (x) 

V 


in  this  case. 

If  L(v)  =A,  then  C  (x)  =C  (x)  aC  (x)  and  H(x,z  )  =  (z  ©C  (x) )  aC  (x) 

vuw  uuuw 

so 


H{x,0)  ©  H(x,l)  =  (C  (X)  aC  (x))  ©  (flC  (x))  aC  (x)  ) 

u  w  u  w 

=  C  (x)  =  X  (x) 

w  V 

in  this  case. 

If  L(v)  =v,  then  C  (x)  =C  (x)  vC  (x)  and  H(x,z  )  =  (z  ©C  (x) )  vC  (x) 

vuw  uuu  w 

so 


H(x,0)  ©  W(x,l)  =  (C  (x)  vC  (x)}  ©  (OC  (x))  vC  (x)) 

u  w  u  w 


=  ->C  (X)  =  X  (x) 

W  V 


in  this  case.  Thus  we  have  shown  in  each  case 


dC  (x) 

— =  H(x,0)  ©  H(x,l)  =  X  (x) 

dC  (x) 

u 
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Let  us  define 


H  =  C  [u/(z  ®C  )  ]  . 

V  u  u 


Recall  by  definition 


dC  (x)  dH(x,z  ) 


dC  (x)  *^^u 

u 


—  =  H(x,0)  ®  H(x,l) 


gives  the  conditions  where  C  (x) ,  (which  is  the  subcircuit  of  C  rooted  at 

V 

gate  v)  is  sensitive  to  the  value  transmitted  from  gate  u. 


LEMMA  U. 


dC  (x) 

X  (X)  =  -- 

dC  (X) 
u 


Proof.  This  Lemma  can  be  proved  either  by  application  of  the  Propositions 
1-5,  or  directly  by  definition  of  the  boolean  difference.  We  give  here  a 
complete  direct  proof. 

If  L(v)  ="1,  then  C  (x)  ='' C  (x)  and  C  (x,z  )  ="l  (z  ©C  (x)  )  so 

V  u  V  u  u  u 


H(x,0)  ©  H(x,l)  =  (1C  (x))  ©  C  (X)  =  1  =  X  (x) 

u  u  V 


in  this  case. 

If  L(v)  =@,  then  C  (x)  =C  (x)  ®C  (x)  and  H(x,z  )  =  (z  ®C  (x))  ©C  (x) 

V  u  w  u  u  u  w 


.  -0 
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Now  fix  some  gate  u€V-{Vq}.  Let  us  make  the  inductive  assumption  that 


C,  (x) 


dC  (x) 
dC  (x) 

V 


for  all  gates  v  £V  strictly  preceding  u  in  the  given  topological  order  of 
C.  Let  (u,v)  6E  be  the  unique  edge  of  C  departing  from  gate  u.  By  the 
induction  hypothesis, 


C,  (X)  = 


dC  (x) 
dC  (x) 

V 


Define 


if  L(v)€{1,©} 


X  (x)  =  <  C  (x)  if  L(v)  =  V 

V  \  w 


V  “IC  (x)  if  L(v)  =  A 
w 


where  (u,v) , (w,v)  EE  are  the  edges  entering  gate  v  in  C. 

By  examining  the  rules  observe  that  we  have  defined 


C' ,  (x)  =  C’  ,  (x)  aX  (x) 

u'  V  V 


We  must  now  prove  that 


c;.  u)  -  ^ 

dC  (x) 
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PROPOSITION  4. 


d{f^(x)  Af^Cx)) 

dx. 

1 


df  (X)  df  (X) 

f,  (x)  A— -  ©  f  (x)  A— r - 

1  dx .  2  dx . 


df^(x)  df^Cx) 
dx. 


dx . 
1 


PROPOSITION  5. 


d(f^(x)  vf2(x)) 

dx. 

i 


df  (x)  df  (x) 


df^(x)  df^Cx) 

dx.  ^ 

1 


dx. 

1 


4.2  An  Inductive  Proof  of  Theorem  1 

Fix  a  topological  ordering  <  of  the  gates  of  circuit  tree  C.  The 
proof  of  Theorem  1  will  proceed  by  induction  in  this  topological  order  <, 
beginning  from  the  root  gate  v^. 

For  the  basis  of  the  induction,  we  observe  that  C  (x)  =C(x),  so 

V 

0 


dC(x)/dC  (x)  =1. 


Furthermore,  the  construction  gives  C , (x)  =1,  so  we  have 


(x) 


dC  (x) 
dC  (x) 

Vo 


as  required. 
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k.  PROOF  OF  THE  CORRECTNESS  OF  OUR  BOOLEAN  DIFFERENCES  CIRCUIT 
It  this  section  we  prove  Theorem  1. 


4. 1  Chain  Rules  for  Boolean  Differences 

We  will  use  the  following  fundamental  rules  for  manipulating  boolean 
differences.  It  can  be  easily  proved  from  the  definition  of  boolean  difference 

PROPOSITION  1.  (The  Chain  Rule)  If  f{x,y)  =  f^(f2(x),y)  then 


df(x,W 

dx. 

1 


df. 


df^Cx) 
dx . 

i 


The  following  propositions  follow  from  the  Chain  Rule  by  use  of 
elementary  boolean  algebra  identities  and  the  definition  of  the  boolean 
difference. 


PROPOSITION  2. 


d(1f  (X)) 

dx. 

1 


df  (x) 

dx. 

1 


PROPOSITION  3. 


d(f^(x)  ef2(x)) 

dx. 

1 


df^(x) 


dx . 
1 


df2{x) 


dx . 
1 


COROLLARY  I.  Alt  S-A  faults  fov  5  an  input  x  can  be  determined  by  an 
acyclic  boolean  circuit  FS  (C(S))  of  <  7n(d  +1)  gates  and  depth  <  3(d  +1), 
and  hence  in  <  7n(d+l)  sequential  time. 

Note  that  the  fault  simulation  circuit  FS (C(S))  utilized  just  the 
values  of  gates  at  level  in  reverse  order  t  = d,d-l, . • . , 0.  We  can 

avoid  construction  of  FS (C{S))  and  instead  construct  a  VLSI  circuit  with 
feedback  lines  which  simulatively  determines  S-A  faults  of  level  V^.  To 
get  the  required  values  of  the  gates  of  level  we  can  simply  reexecute 

S  on  the  same  input  x.  Thus  (if  we  wish  to  avoid  actually  constructing 
FS (C(S))  we  require  by  this  method  a  total  of  d  executions  of  S,  each 
requiring  parallel  time  d. 

Assxming  S  has  VLSI  area  A  using  X  layers,  we  get  by  this  construction 

COROLLARY  2.  All  S~A  faults  for  S  can  be  determined  by  a  VLSI  circuit  (with 
feedback  lines)  of  o(n)  gates j  0(A)  area  and  0(1)  layers ,  taking  0(d  ) 
parallel  time. 

We  consider  S  to  be  reversable  if  after  any  execution  of  d  parallel 

steps,  a  special  reverse  switch  can  be  set  so  that  on  consecutive  steps 

t  = d+l,d+2, , . . , 2d,  the  gates  of  S  have  the  same  value  at  time  t  as  they 

previously  did  at  time  |t  -2d  -l|.  As  mentioned  in  the  introduction,  many 

switching,  sorting  and  convolution  circuits  are  both  oblivious  and  reversable 

in  this  sense.  Observe  that  if  S  is  reversable,  then  S  can  compute  the 

values  of  levels  V, ,V,  V  in  reverse  order  using  d  parallel  steps. 

d  d-l  0 

COROLLARY  3.  If  S  is  reversable,  then  all  S-A  faults  can  be  determined  by  a 
VLSI  circuit  (with  feedback  lines)  of  0(n)  gates,  0(A)  area,  0(Z)  layers, 
and  0(d)  time. 


4  and  7  we  can  aonatruot  from  C  in  Umar  time  a  boolean  circuit  FS(C) 
consisting  of  <  7n  gates  and  depth  <  3(d+l),  using  VLSI  area  <  9A  and 
2(£+l)  layers.  For  each  b6{o,l},  gate  v  €v  and  input  x, 

^^^^^S-A-b(v)  ('i.e.j  gate  s-A-b(v)  is  evaluated  to  1  by  FS(C) 

on  input  x)  iff  a  s-A-b  fault  in  C  at  gate  v  is  detectable  on 

.  ->■ 

IKfUt  X. 

3.^  Fault  Simutation  of  VLSI  Circuits  With  Feedback 

We  briefly  describe  here  how  our  techniques  for  fault  simulation  can  be 
extended  to  apply  to  some  VLSI  circuits  S  with  feedback  lines  (i.e.,  S  may 
have  cycles).  We  note  that  5  is  input  oblivious  in  the  sense  that  the 
sequence  of  logical  operations  (but  not  necessarily  the  values  computed  by 
these  operations)  of  its  gates  are  independent  of  its  given  input  x.  Let 
V  be  the  set  of  gates  of  S.  We  assume  the  computation  sequence  of  length  d  of 

5  on  input  x  can  be  modeled  by  a  boolean  circuit  tree  C{S)  of  depth  d  such 

that  the  gates  of  C (S)  are  partitioned  into  disjoint  levels  V„,V, , . . . ,V,. 

u  1  d 

Intuitively,  each  level  corresponds  to  the  logical  operations  executed 

at  time  t.  More  precisely,  for  each  t=0,l,...,d  we  assume  a  1-1  mapping 

r^  from  V  to  level  such  that  Vv€v,  C  ,  ,  (x)  is  the  boolean  value 

t  t  r  (v) 

computed  at  gate  v  by  S  at  time  t  given  an  input  vector  x.  Thus 
r^(v)  evaluates  to  just  the  value  computed  by  S  at  gate  v  of  time  t. 

We  require  that  each  edge  entering  a  gate  of  level  depart  only  from 

a  gate  of  level  and  so  the  value  of  a  gate  at  level  depends  only 

on  the  values  computed  by  gates  at  level  We  shall  model  faults  in 

S  simply  by  S-A-b  faults  in  C (S) .  Suppose  S  has  n  gates.  Then  C (S) 
has  n(d+l)  gates.  A  direct  consequence  of  Theorem  2  is 


eissociated  with  the  distinguished  new  vertex  v'  on  the  H  new  layers 
immediately  above  the  subcircuit  associated  with  the  original  vertex  v, 
using  the  new  grid  lines  to  do  the  required  wiring  and  for  placement  of  the 
additional  circuit.  It  is  easy  to  verify  this  wiring  can  be  done  within 
the  required  curea.  o 

Note.  The  actual  area  increase  for  C*  will  depend  somewhat  on  the 
VLSI  technology  utilized.  However,  it  is  clear  that  the  area  increase  is  a 
small  constant,  for  the  standard  technologies  such  as  nMOS  and  cMOS. 


3.3  Construction  of  Our  Fault  Simulation  Circuit 

Figure  7  gives  a  simple  construction  for  building  our  fault  simulation 
circuit  FS(C)  from  the  boolean  differences  circuit  C.  Note  that  this 
construction  is  applied  to  each  gate  v  €V,  and  results  in  3n  addition 
gates  and  an  additional  depth  of  2.  By  Theorem  1,  the  resulting  circuit 
satisfies 


FS(C)  (x) 

S-A-1 (v) 


=  nC',  (X)) 


(x) 


nc  (x))  ® 

V 


dC(x) 
dC  (x) 

V 


and  furthermore. 


FS(C)^  ^  .  (x) 

S-A-0 (v) 


C  (x)  ©  C,  (x)  =  C  (x) 

V  v'  V 


dC  (x) 
dC  (x) 

V 


The  following  are  then  implied  by  Lemmas  1  and  2. 


THEOREM  2.  Suppose  we  ave  given  a  boolean  circuit  tree  C  with  n  gateSj  a  depth 
of  dj  and  VLSI  area  A  using  I  layers.  Then  using  the  rules  in  Figures  3 


Note.  In  the  case  OP  ={®,T,a},  then  at  most  1  new  gate  is  introduced 
and  not  collapsed  and  the  additional  depth  is  only  1  for  each  original  gate. 

In  this  case,  the  number  of  gates  of  C*  is  ^  2n,  and  the  depth  is  ^  2d  + 1. 

(In  practice,  one  can  probedsly  expect  C*  to  have  approximately  3n  gates  if 
C  has  a  significant  proportion  of  gates  that  are  not  v-gates.) 

In  Section  4,  we  prove 

THEOREM  1.  For  each  gate  v£v, 

V  * 

dC  (x) 

V 

Thus  each  gate  v*  computes  in  C*  the  boolean  difference  of  C(x) 
with  respect  to  subcircuit  C^(x).  (See  Figures  6  and  8.) 

3.2  The  VLSI  Area  of  C 

Let  us  assume  a  standard  VLSI  model  such  as  described  in  [Oilman,  84]. 

A  VLSI  chip  consists  of  a  constant  number  of  layers,  where  on  each  layer, 

the  wires  run  along  the  edges  of  a  square  grid  with  unit  length  separation 

between  grid  points.  Each  grid  point  may  contain  a  boolean  gate.  [Oilman,  84] 

shows  that  any  such  VLSI  chip  with  2.  layers  can  be  redesigned  to  have  only 

2 

2  layers,  with  only  a  factor  of  %  area  increase. 

LEMMA  3.  C'  can  be  constructed  within  VLSI  area  <  9A  using  <  2(£  +1)  layers 

if  C  has  a  VLSI  chip  with  area  A  using  Z  layers. 

P  roof .  We  begin  with  the  given  VLSI  chip  for  C  and  then  add  an  additional 
Z  layers  above  the  original  ones.  We  also  add  an  additional  pair  of  horizontal 
and  vertical  grid  lines  between  every  previous  pair  of  consecutive  grid  lines. 

In  each  application  of  the  rules  R,  -R^,  we  place  the  new  subcircuit 
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3.  THE  CIRCUIT  CONSTRUCTIONS 

3. 1  A  Circuit  For  All  Boolean  Differences 

Fix  a  boolean  circuit  tree  C  =  (V,Vq,E,L,Z,OP) .  We  construct  a  circuit 
C  =  (V ,v^,E' ,L' ,Z,OP)  from  C  as  follows.  C'  contains  C  as  a  subcircuit. 
The  vertex  set  V'  of  C'  contains  the  original  vertex  set  V,  a  distinguished 
new  vertex  s,  and  a  distinguished  new  vertex  v'  for  each  original  vertex 
v€V,  plus  some  additional  nondistinguished  new  vertices.  All  these  new 
vertices  are  distinct  from  those  in  V.  The  vertex  s  has  constant  label 
L(s)  =1  and  an  edge  (s,Vq)  £e*  from  s  to  v^.  The  circuit  construction 
now  proceeds  in  topological  order  of  C,  using  the  rules  given  in 

Figure  3.  The  left  portion  of  each  rule  is  a  subcircuit  of  C,  and  the 
right  portion  of  each  rule  is  the  corresponding  new  subcircuit  of  C.  See 
Figure  4  for  an  example  of  the  construction  using  the  rules  "^5* 

Note  that  the  rules  R^^  -R^  if  applied  to  a  gate  v  with  fan-in  1,  yields 
a  new  gate  v'  with  in  degree  1  and  label  ©.  In  this  case  the  gate  v'  is 
to  be  collapsed  into  its  unique  predecessor.  This  operation  is  called  a  ®-gate 
aollccpse .  (See  Figure  5  for  an  example  of  a  ©-gate  collapse.)  After  applying 
©-gate  collapse  wherever  possible,  the  resulting  circuit  is  denoted  C .  (See 
Figure  6.) 

It  follows  immediately  from  our  construction  that 

LEMMA  2.  C  has  <  4n  gates  and  depth  <  3d  + 1,  where  n,d  are  the  number 
of  gates  and  depth  of  C,  respectively. 

Proof.  The  most  costly  rule  in  our  construction  is  R^,  where  3  new  gates  are 
introduced  and  not  collapsed.  The  additional  depth  is  2  for  each  original  gate. 
This  rule  can  be  applied  at  most  d  times  along  each  path,  and  a  total  of  at 

□ 


most  n  times. 


Let  C  be  a  boolean  circuit.  Fix  some  gate  v  and  boolean  value 
b€{0,l}.  Observe  that  by  definition,  C=Clv/bl  is  a  circuit  identical  to 


C  except  it  has  a  S-A-b  fault  at  gate  v.  This  S-A-b  fault  at  gate  v 
is  detectable  on  input  x,  if  C(x)  yC(x). 

For  each  v  €v,  let  z  be  a  new  indeterminate  variable  distinct  from 

V 

A 

r.  Observe  that  C=C[v/(z  ©C  )]  is  the  circuit  derived  from  C  by 

v  v 

substituting  z  ®C  in  place  of  the  subcircuit  C  .  The  definition  of 

V  V  V 

boolean  difference  implies 
dC(x,z  ) 

V 

■A  -►  ^  A 

iff  C(x,0)  ®C(x,l)  =1  iff  C(x,z^)  is  sensitive  to  a  change  in  z^. 

But  clearly  C(x,z^)  is  sensitive  to  a  change  in  z^  iff  C(x)  is  sensitive 
_  -► 

to  a  change  in  C^(x).  Hence  we  can  let 


dC(x) 

dC  (x) 
v 


denote 


dC(x,z  ) 
_  v 

dz 

V 


This  definition  implies  dC(x)/dC  (x)  =1  iff  C(x)  is  sensitive  to  a 

V 

change  in  C  (x) .  Hence 

V 


(b©C  (x))A 

V 


dC(x) 
dC  (x) 

V 


1 


iff  (b^C  (x)  and  C(x) 

V 


is  sensitive  to  a  change  in 


C  (x))  iff 


C(x) 


where  C  =C[v/b].  Thus  we  have 


LEMMA  1.  (b®C^(x))  A  dC(x)/dC^(x)  =  1  iff  a  S-A-b  fault  at  gate  v  is 

detectable  on  input  x. 
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The  depth  d  of  circuit  C  is  the  length  of  the  largest  path  in  C, 

Since  C  is  an  acyclic  digraph,  C  has  a  topotogiaal  ordering  <  which  is  a 
total  ordering  of  such  that  V(u,v)  £e,  v  < u.  A  topological  ordering  can  be 
computed  in  linear  sequential  time  on  a  unit  cost  RAM  using  a  depth  first  search 
[Aho,  Hopcroft,  Oilman,  74],  If  C  is  a  tree,  than  any  postordering  is  a 
topological  ordering.  (See  Figure  1  for  an  example  of  a  boolean  circuit.  Note 
that  its  gates  are  indexed  in  a  topological  order. ) 

For  each  v€V,  let  be  the  boolean  circuit  identical  to  C  except 

with  root  V,  Given  an  input  vector  x,  let  ihe  boolean  function 

computed  from  gate  v. 

Let  C(x)  =C  (x)  be  the  boolean  function  computed  by  the  circuit  C 
from  root  v^.  Note  that  C(x)  can  be  sequentially  evaluated  in  n 
steps  using  a  traversal  in  reverse  topological  ordering  of  C.  Alternately, 

C(x)  can  be  evaluated  in  parallel  in  time  d  using  n  processors,  where 
d  is  the  depth  of  C. 

It  will  be  frequently  useful  to  modify  the  circuit  C  so  that  it 
computes  a  given  boolean  function  f(y)  at  a  gate  vGV  rather  than  C^(x). 

This  substitution  operatton  C[v/f(y)]  is  formally  defined  as  follows: 

(i)  Let  F  be  a  boolean  circuit  such  that  F(y)  =f(y). 

(ii)  Let  C=C[v/f(y)]  be  the  boolean  circuit  derived  by  (a)  taking  the 
union  of  C  and  F,  (b)  deleting  all  edges  of  C  entering  v,  and  (c) 
merging  the  root  of  F  with  v,  so  the  label  of  v  is  now  the  label  of 
the  root  of  F. 

Observe  that  C^(x,y)  =f(y)  as  required.  As  a  simple  example,  the 
substitution  C=C[v/b],  where  b£{o,l},  is  the  circuit  derived  from  C  by 
deleting  all  edges  entering  gate  v  and  resetting  the  ladjel  of  v  to  be  b. 

If  y  is  a  variable,  C[v/y]  is  similarly  constructed,  except  the  label  of 
v  is  set  to  y.  See  Figure  2  for  a  simple  example  of  the  substitution  operation. 


A  '  A-* 


2 


PRELIMINARY  DEFINITIONS 


2. I  The  Boolean  Differences 

Let  f(x)  be  a  boolean  function  with  indeterminates  x={x,  ). 

1  m 

The  boolean  differenoe  of  fix)  with  respect  to  is 


(That  is,  df  (x)/dx^  is  the  exclusive  of  f(x)  with  x^  set  to  0,  and  of 


f  (x) 

with  X. 

1 

set  to  1.) 

We  say 

f(x) 

is  sensitive  to 

X .  if  the  value 

of  f 

changes 

depending  on 

whether 

X. 

i 

is  0  or  1.  Thus 

df(x)/dx.  =1  iff 
1 

f  (x)  is  sensitive  to  x. . 

1 


2.2  Boolean  Circuits 

A  boolean  aivouit  C  is  a  triple  (V,Vq,E,L,Z,0P)  where 

(i)  V  is  a  set  of  n  gates  (or  nodes)  with  distinguished  root 

v^ev. 

(ii)  E  c V  XV  are  directed  edges  which  are  assumed  to  contain  no  cycles, 

(iii)  L  is  a  vertex  labeling  from  V  to  Z  UOP  U{0,l}. 

(iv)  Z  =  {x  ,...,x  },  is  the  set  of  input  variables. 

1  m 

(v)  0P={t,a,v,©}  are  the  usual  boolean  operators. 

The  fan-in  (fan-out)  of  each  v  £v  is  the  number  of  edges  entering 
(departing  from)  v.  For  simplicity  in  our  construction  we  assume  the  maximum 
fan-in  of  any  v€v  is  not  more  than  2.  If  L(v)  €ZU{o,l}  then  v  is  a 
input  gate,  and  we  require  that  v  have  in  degree  0.  We  assume  no  two 
input  gates  are  labeled  with  the  same  input  variable.  C  is  a  tree  if  all 
its  gates  have  fan-out  at  most  1. 


factors,  more  size,  area,  layers  and  parallel  computation  time  than  that  of  the 
original  circuit  S. 


1 .8  Organization  of  the  Paper 

This  paper  is  organized  as  follows.  In  section  2  we  formally  define  a 
boolean  circuit  and  the  boolean  differences.  In  section  3  we  give  our  circuit 
construction  for  computing  the  boolean  differences  and  solving  the  S-A  fault 
simulation  problem  for  boolean  circuit  trees.  In  section  4  we  prove  the 
correctness  of  our  boolean  differences  circuit.  In  section  5  we  describe  how 
we  may  extend  these  techniques  to  acyclic  circuits  with  fan-out  >  1. 


'J  ■  I 
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LEMMA  5. 


dC(x)  p, 

dC  (x) 

u 


Proof.  By  the  Chain  Rule, 


dC  (x) 
dC  (x) 


dC(x) 
dC  (x) 

V 


dC  (x) 

V 

dC  (x) 


=  C*  (x)  aX  (x) 

V*  V 


since  by  the  induction  hypothesis  for  v<u. 


I 


i 


C  ,  (X) 

v' 


dC(x) 

dC^(x) 


and  by  Lemma  4 


dC  (x) 

V 

dC  (x) 

u 


X  (X) 


From  Lemma  5  we  immediately  get 


dC(x) 
dC  (x) 


=  C  ,  (x)  A  X  (x) 
v'  V 


c;.  (X) 


proving  the  induction  step  required  for  Theorem  1. 
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5.  BOOLEAN  DIFFERENCES  OF  CIRCUITS  WITH  FAN-OUT  >  1 

In  this  sectioni  we  describe  how  to  extend  our  techniques  to  computing 
all  the  boolean  differences  for  a  circuit  C  with  fan-out  >  1.  Without 
less  of  generality,  we  can  ctssume  C  has  fan-out  ^  2  (since  a  transformation 
to  fan-out  <  2  requires  only  a  size  increase  linear  in  the  number  of  edges 
of  C).  We  will  fix  C  = (V,Vg,E,L,I,OP)  to  be  such  a  boolean  circuit. 


5, 1  Edge  Sens! tivity 

Let  E  be  the  circuit  derived  from  C  by  replacing  each  edge  (u,v)  €e 

of  C  by  a  chain  of  two  new  edges  (u,uv) , (uv,v)  where  uv  is  a  new  © 

gate  with  fan-in  1  and  fan-out  1  (see  Figures  9  and  10).  Note  that  E  is  logically 

equivalent  to  C  since  E  (x)  = E  (x)  =C  (x).  Hence  by  definition 
^  uv  u  u 


dE  (x) 

dE  (x) 
uv 


dE  [uv/  (z  ©E  )  ]  (x,z  ) 
uv  uv  u,v 


dz 


uv 


gives  the  conditions  where  C(x)  is  sensitive  to  the  value  computed  across 
edge  (u,v).  (observe  that  dE (x) /dE^^ (x)  may  differ  from  dC(x)/dC^(x) 
if  u  has  fan-out  >1  in  C. ) 


5,2  A  Boolean  Difference  Circuit  Construction  for  Fan-Out  2 

We  will  construct  our  boolean  difference  circuit  C'  as  follows.  C' 
will  initially  contain  the  circuit  E.  We  then  apply  in  topological  order 
of  E  the  rules  -R^  of  Figure  3  previously  described  in  Section  3.  We 
also  apply  in  this  order  a  now  rule  Rg,  as  given  in  Figure  11,  to  each  gate 
u  with  fan-out  2.  Let  (u,Vj^)  ,  (u,V2)  be  the  edges  departing  v.  Before 
application  of  rule  Rg  to  gate  u,  since  v^^  <u,  we  have  already  constructed 


a  subcircuit  of  C*  which  computes 


(UVj^) 


(x) 


dE  (x) 

dE  (x) 
uv. 


The  application  of  rule  Rg  to  gate  u  requires  that  we  recursively 
construct  a  subcircuit,  say  V,  that  computes 


P(x)  = 


dE(x) 


dE 


uv. 


dE 


uv_  idE  (x) 
2  \  \xv^ 


To  complete  the  construction  of  C*,  we  apply  the  ©-gate  collapsing  rule 
given  in  Figure  5.  (See  Figure  12.) 

In  the  case  there  are  many  gates  of  fan-out  2,  this  construction  is 
obviously  finite,  but  may  be  computationally  inefficient  (at  least  in 
comparison  with  our  linear  time  construction  in  the  case  of  fan-out  1) ,  but 
it  nevertheless  is  certainly  much  more  efficient  than  the  direct  computation 
of  boolean  differences  by  application  of  chain  rules,  which  was  the  only 
previously  known  method. 


5.3  Proof  of  Our  Boolean  Difference  Circuit  With  Fan-Out  2 

We  prove  here  the  correctness  of  the  boolean  difference  circuit  C' 
constructed  in  Section  5.2. 

THEOREM  3.  For  each  gate  v  of  C, 
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Proof  by  Induction.  Fix  a  topological  ordering  <  of  the  gates  of  C.  As 
in  Theorem  1,  the  proof  of  Theorem  3  will  proceed  by  induction  in  this 
topological  order  <,  beginning  from  the  root  gate  v^. 

The  basis  of  the  induction  is  the  same  as  in  the  proof  of  Theorem  1, 
where  we  have 


(X) 


dC(x) 
dC  (x) 


Now  fix  some  gate  u€v-{Vq}. 


Let  us  make  the  inductive  assumption  that 


C 

V 


I 


(x) 


dC  (x) 
dC  (x) 


for  all  gates  v€v  strictly  preceding  u  in  the  given  topological  order  of 
C.  Let  (u, Vj^) ,  (u,V2)  Ce  be  the  edges  of  C  departing  from  gate  u.  By 
the  induction  hypothesis. 


C-  (X)  = 


dC  (x) 


v: 


for  i  =  1, 2 


1  dC  (x) 

V  . 

1 


For  i  =1,2  define  A  (x)  just  as  in  proof  of  Theorem  1. 

i 


1  if  LCv^)^^,©} 


X  (x)  = 

V. 

1 


C  (x)  if  L(v.)  =  V 
w  1 


1 C  (x)  if  L(v. )  =  A 

W  1 
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where  (u,v^) , (w,v^)  £e  are  the  edges  entering  gate  in  C. 

By  examining  the  rules  -  R^,  we  observe  that 


C',(x)  =  l?(x)  ®  (C',(x)aX  (x))  ©  (C',(x)aX  (x)) 

where 

viH) - 5 

dE 

UV2 

We  must  now  prove  that 


C'  , (X) 
u' 


dC  (x) 

dC  (X) 
u 


For  i=l,2  let  us  define 


r(i) 


=  E  [uv./(z 

V .  1  uv . 

1  1 


uv 


)] 


Recall  by  definition 


dE  (x)  dE^^^ (x,z  ) 

V.  uv. 

1 


dE  (x) 

uv. 

1 


dz 


E^^’ (x,l) 


uv. 

1 


gives  the  conditions  where  C  (x) ,  {which  is  the  subcircuit  of  C  rooted 

V. 

1 

at  gate  v^)  is  sensitive  to  the  value  transmitted  across  the  i-th  edge 
(u,v^)  entering  gate  v^. 
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LEMMA  6.  Fov  each  i  =1,2, 


dE  (X) 

V. 

1 

1 


Proof.  If  L(v^) 
so 


(i) 


="• ,  then  C  (x)  =*' C  (x)  and  E'  Mx,z  )  =1(2  ffiC  (x)) 
V .  u  uv .  uv ,  u 

1  11 


E^^’{x,0)  ©  E^^’(x,l)  =  PC  (x))  ©  C  (x)  =  1=X  (x) 

U  U  V, 

1 


in  this  case. 


If  L(v,) 
1 

©  C  (x)  so 
w 


),  then  C  (x)  =C  (x)  ©C  (x)  and  E  (x,z  )  =  (z  ®C  (x) ) 
V.  u  w  uv.  uv.  u 

1  11 


E^^Nx,0)  ©  E^^Nx,1)  =  (C  (x)  ®C  (X))  ©  (PC  (x))  ©C  (x)) 

u  w  u  u 


=  1  =  (X) 

i 


in  this  case. 


(i) 


If  L{v.  )  =A,  then  C  (x)  =C  (x)  aC  (x)  and 

1  V.  u  w 

1 


E  (x,z  )=(z  ®C  (x))aC  (x)  so 
UV .  uv .  u  w 

1  1 


E^^^  (x,0  ©  E^^’  (x,l)  =  (C  (X)  aC  (x))  ©(PC  (x))  aC  (x)) 

u  w  u  w 


=  C  (x)  =  X  (x) 
w  V . 

1 


in  this  case. 


E  ^  (x,z  )  =  (z  ®C  (x))  vC  (x)  so 
uv .  uv .  u  w 

1  1 


If  L(v.  )  =V,  then  C  (x)  =  C  (x)  vC  (x)  and 
1  V.  u  w 

^ 
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LEMMA  7. 


dE(x) 

dE  (x) 
uv. 

1 


C  ,  (x)  A  \  (x) 

v;  V. 

1  1 


for  i  =  1 , 2 


Proof.  By  the  Chain  Rule,  and  Lemma  6, 


^  ^  dE  (x) 

dE(x)  ^  ._dE(_xl  ^  _j:i - =C'.(x)aX  (X) 

dE  (x)  dE  (x)  dE  (x)  i  i 


uv. 

1 


V. 

1 


uv. 

1 


since  by  the  induction  hypothesis  for  v^  <u. 


dE  (X) 
V. 

1 


Applying  Lemma  7  we  immediately  get 


dC  (x) 

dC  (x) 
u 


(C'  (x)  A  X  (x) ) 

Vi 


(C*  ,  (x)  a>  (x)  ) 

V  ’  V 

2  ^"2 


dE 


dE  (x) 


uv  \dE  (x) 

2  \  uv^ 


C'  ,  (x) 
u' 


proving  the  induction  step  of  Theorem  3.  °  iP 
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The  subscript  V  computes 


